Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

71208

Tracked CVEs

6697

Critical

762

Exploited in wild

1829

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.8Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package1895
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab367
6CVE-2026-112816Critical· 10.0Improper certificate validation in the HTTPS listener in LXD367
7CVE-2026-116366Critical· 9.5Unauthenticated RCE vulnerability against ClickHouse Server364
8CVE-2026-97631Critical· 9.5Pre-boot RCE in EDK II PXE driver264

This week's digest →All digests

Feed

25 matches

CVE-2025-12853Medium· 4.7

12mo ago

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attac…

▾ Sunlitmayurik · best_house_rental_management_systemEPSS 0.36%via NVD

CVE-2025-12325High· 7.3

1y ago

A vulnerability has been found in SourceCodester Best Salon Management System 1.0

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be init…

▾ Twilightmayurik · best_salon_management_systemEPSS 0.51%via NVD

CVE-2025-12226Medium· 4.7

1y ago

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote expl…

▾ Sunlitmayurik · best_house_rental_management_systemEPSS 0.41%via NVD

CVE-2025-12208High· 7.3

1y ago

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is …

▾ Twilightmayurik · best_house_rental_management_systemEPSS 0.48%via NVD

CVE-2025-11662High· 7.3

1y ago

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument serv_id results in sql injection. It is possible to launch…

▾ Twilightmayurik · best_salon_management_systemEPSS 0.48%via NVD

CVE-2025-11615High· 7.3

1y ago

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote e…

▾ Twilightmayurik · best_salon_management_systemEPSS 0.47%via NVD

CVE-2025-11614High· 7.3

1y ago

A vulnerability was identified in SourceCodester Best Salon Management System 1.0

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql inject…

▾ Twilightmayurik · best_salon_management_systemEPSS 0.41%via NVD

CVE-2025-11057High· 7.3

1y ago

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/print_inv.php. Such manipulation of the argument ID leads to sql injection. Th…

▾ Twilightmayurik · pet_grooming_management_softwareEPSS 0.48%via NVD

CVE-2025-11051Medium· 4.3

1y ago

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely.

▾ Sunlitmayurik · pet_grooming_management_softwareEPSS 0.25%via NVD

CVE-2025-10836High· 7.3

1y ago

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be …

▾ Twilightmayurik · pet_grooming_management_softwareEPSS 0.48%via NVD

CVE-2025-10835Medium· 6.3

1y ago

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.php. Performing manipulation of the argument ID results in sql injection. The a…

▾ Sunlitmayurik · pet_grooming_management_softwareEPSS 0.39%via NVD

CVE-2025-10832High· 7.3

1y ago

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_details.php. The manipulation of the argument barcode results in sql injection…

▾ Twilightmayurik · pet_grooming_management_softwareEPSS 0.48%via NVD

CVE-2025-10828Medium· 6.3

1y ago

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be l…

▾ Sunlitmayurik · pet_grooming_management_softwareEPSS 0.39%via NVD

CVE-2025-10840Medium· 6.3

1y ago

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-payment.php. This manipulation of the argument sql111 causes sql injection. The attack can b…

▾ Sunlitmayurik · pet_grooming_management_softwareEPSS 0.49%via NVD

CVE-2025-10839Medium· 6.3

1y ago

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-print.php. The manipulation of the argument ID results in sql injection. It is…

▾ Sunlitmayurik · pet_grooming_management_softwareEPSS 0.49%via NVD

CVE-2025-10598High· 7.3

1y ago

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_product.php. Such manipulation of the argument group_id leads to sql injection. T…

▾ Twilightmayurik · pet_grooming_management_softwareEPSS 0.42%via NVD

CVE-2023-3617High· 7.3

3y ago

A vulnerability was found in SourceCodester Best POS Management System 1.0

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. The manipulation of the argument userna…

▾ Twilightmayurik · best_pos_management_systemEPSS 0.83%via NVD

CVE-2023-27206Medium· 6.1

3y ago

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

▾ Sunlitmayurik · best_pos_management_systemEPSS 0.43%via NVD

CVE-2023-27205Critical· 9.8

3y ago

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

▾ Midnightmayurik · best_pos_management_systemEPSS 0.79%via NVD

CVE-2023-27204Critical· 9.8

3y ago

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

▾ Midnightmayurik · best_pos_management_systemEPSS 0.79%via NVD

CVE-2023-27203Critical· 9.8

3y ago

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.

▾ Midnightmayurik · best_pos_management_systemEPSS 0.79%via NVD

CVE-2023-27202Critical· 9.8

3y ago

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

▾ Midnightmayurik · best_pos_management_systemEPSS 0.79%via NVD

CVE-2023-0946Medium· 6.3

3y ago

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument i…

▾ Sunlitmayurik · best_pos_management_systemEPSS 0.49%via NVD

CVE-2023-0945Low· 3.5

3y ago

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the inp…

▾ Sunlitmayurik · best_pos_management_systemEPSS 0.36%via NVD

CVE-2023-0943Medium· 4.7PoC

3y ago

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler.…

▾ Twilightmayurik · best_pos_management_systemEPSS 2.3%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0

A vulnerability has been found in SourceCodester Best Salon Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A vulnerability was identified in SourceCodester Best Salon Management System 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was found in SourceCodester Best POS Management System 1.0

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0

A vulnerability has been found in SourceCodester Best Salon Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A vulnerability was found in SourceCodester Best House Rental Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0

A vulnerability was identified in SourceCodester Best Salon Management System 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0

A vulnerability was found in SourceCodester Best POS Management System 1.0

A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial